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PREFACE 


The content of this document was provided by the Control/Propulsion Department, 
Space Flight Training Division, Mission Operations Directorate (MOD), Lyndon B. 
Johnson Space Center (JSC), National Aeronautics and Space Administration (NASA). 
Technical documentation support was provided by Integrated Documentation Services 
(IDS). Any questions concerning this workbook or any recommendations should be 
directed to the book manager. 


This material is for training purposes only and should not be used as a source of 
operational data. АП numerical data, displays, and checklist references are intended as 
examples. To determine any prerequisites before using this document, consult the 
applicable Certification Plan. For shuttle manuals, consult the appropriate flight 
controller's certification guide (Blue Book), or the Crew Training Catalog. For Space 
Station manuals, consult the appropriate Space Station Certification Guide or Training 
Administration Management System (TAMS). The applicable training package should 
be studied before attending any classroom session or lesson for which this is a 
prerequisite. 


If this workbook is being read as part of a formal syllabus, the reader should complete 
the training materials evaluation form at the end of the document. The evaluation form 
does not need to be signed. 
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1.0 OVERVIEW 


1.1 ОВЈЕСТМЕ5 


After completing this workbook, the student should be able to do the following: 


e Describe the purpose, location, and flight-phase availability of each controller. 
e Describe the power sources for each controller. 


e Describe the Primary Avionics Software System (PASS) and Backup Flight System 
(BFS) software processing and Redundancy Management (RM) for each controller. 


e Describe the effects of other Flight Control System (FCS) switches on controller 
functions. 


1.2 CONTROLLER PURPOSE 


The Rotational Hand Controller (RHC) controls the orbiter roll, pitch, and yaw 
movements during ascent by sending rate commands to the solid rocket boosters, to 
the main engines' thrust vector control, and to the Orbital Maneuvering System (OMS), 
and by commanding jet firings of the Reaction Control System (RCS). The RHC also 
controls movement on orbit with the OMS and RCS. It controls movement during entry 
with RCS and aerodynamic control surfaces. 


The Translational Hand Controller (THC) controls the vehicle vertical, lateral, and 
longitudinal movements by firing the RCS jets during insertion into orbit, on orbit, and 
during deorbit operations. 


The combined Speedbrake and Thrust Controller (SBTC) allows manual control of the 
speedbrake during entry and of main engine thrust during ascent. (Only the right SBTC, 
the pilot's, is active during ascent.) 


The Rudder Pedal Transducer Assembly (RPTA) outputs rudder pedal commands for 
rudder control during landing and rollout. 


1.3 CONTROLLER LOCATIONS 


1.3.1 Forward Stations 


The forward station controllers are illustrated in Figure 1-1. As shown, both the 
commander's and the pilot's stations have ап RHC, an SBTC, and a set of rudder 
pedals connected to an RPTA. Only the commander has a THC in the forward station. 
The RHC is offset slightly from the vehicle body axis. To suit the operator, it can be 
adjusted 5 inches in the vertical axis and 20^ in the pitch axis. The rudder pedals can 
be adjusted 3.25 inches forward or aft from the neutral position. 
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Figure 1-1. Forward station controllers 


1.3.2 Aft Station 
The aft station has only an RHC and a THC (Figure 1-2). 


1.4 CONTROLLER AVAILABILITY 


Operational Sequences (OPS) and associated Major Modes (MMs) corresponding with 
certain phases of flight will be used throughout this workbook. The controller availability 
matrix (Figure 1-3) illustrates the MMs, in which the various controllers can supply 
manual inputs or signals to the FCS to actually control the vehicle. The shaded area in 
an MM box indicates that the software for that controller is up and running during that 
MM. 


Only the right SBTC is available during MMs 102 and 103 of OPS 1 and MM 601 of 
OPS 6 for manual throttling. Both left and right SBTCs are available in MM 304 and 305 
during OPS 3 and in MMs 602 and 603 during OPS 6 for manual speedbrake control. 


The aft station controllers are available only during OPS 2 and OPS 8 for on-orbit and 
checkout operations. 


During MM 601, the left THC is available for a manual separation from the external tank. 
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Figure 1-2. Aft station controllers 
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ММ/ОР5 1011102 [103 [104 [105 [106 |201[ОР5 8 |202|301 [302 |303 |304 [305 ММ 601 | 602 | 603 
Pilot and commander КНС Pilot and commander RHC 
3-axis command capability 3-axis command capability 
Pilot and commander aft Pilot and commander 
RHC 3-axis RHC 2-axis 


Pilot and commander, RHC THC (forward) 
2-axis (post-MECO only) 


THC forward and aft S right-hand throttle 


THC forward only left-hand speedbrake 


| SBTC right-hand and 


RPTA 


SBTC right-hand throttle 
cont 


SBTC right-hand and 


left-hand speedbrake Body flap 


RPTA 


Body flap 


usa006498_038.cvx 
Figure 1-3. Controller availability matrix 
1.5 CONTROLLER POWER SOURCES 


Each station has a flight controller power switch that controls the power to all the 
controllers in that station. The flight controller power switches are found on forward 
Panels F7 and F8 and aft Panel A6U (Figure 1-4 and Figure 1-5). 


Kai 


SBTC pedals СЗ 5ВТС pedals 


Commander Pilot 
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Figure 1-4. Flight controller power switches (forward station) 
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Figure 1-5. Flight controller power switches (aft station) 


Each station has an associated Device Driver Unit (DDU) that supplies power to all the 
controllers at that station. Each DDU receives its power from two main power buses; 
thus, the DDU remains powered even after the loss of one main power bus. Each DDU 
contains three power supplies - A, B, and C - which supply power to channels 1, 2, and 
3 in each controller. The three channels in each controller are redundant; that is, the 
controller can operate with only one channel selected. 


The following matrix indicates which main power buses are associated with which 
0005. 


Main power buses (MN) 


Left DDU (commanders) A and B 
Right DDU (pilot's) B and C 
Aft DDU A and C 


The circuit breakers associated with these DDUs are located on overhead 
Panel (PNL) 014 (Figure 1-6), PNL 015 (Figure 1-7), and PNL 016 (Figure 1-8). 
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Figure 1-6. DDU-associated circuit breakers on Panel 014 
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Figure 1-7. DDU-associated circuit breakers on Panel 015 
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Figure 1-8. DDU-associated circuit breakers on Panel 016 
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1.6 SIGNAL FLOW 


Commands or signals coming from each controller pass over Flight-Forward (FF) 
Multiplexer/Demultiplexer (МОМ) channels to the FCS in the General Purpose 
Computer (GPC). The control signals passing from the flight controller to the MDMs are 
on triply redundant channels. As an example, pitch, roll, and yaw command channel A 
goes to MDM FF 1 from the left RHC. Pitch, roll, and yaw command channel B goes to 
MDM FF 2, and pitch, roll, and yaw command channel C goes to MDM FF 3. 

(Figure 1-9) 


All controllers for a given station have the same channels assigned to the same MDMs. 
For instance, the signals on channels A, B, and C of each commander's controllers 

(L RHC, L THC, L SBTC, and L RPTA), are sent over MDMs FF 1, 2, and 3, 
respectively. As Table 1-1 illustrates, the controllers for the left and aft stations follow 
the same pattern of channelization, but the right station controllers follow a different 
pattern. This arrangement provides redundancy for the commander's (left station) and 
pilot's (right station) controller signals. For example, if FF 1 is lost, the channel A 
controller signals for the left and aft stations will be missing, but the right station will be 
unaffected because none of the right station controller signals are sent over FF 1. 


Table 1-1. Controller channelization 


FF MDM 1 2 3 4 
L КНС channels B C 
R RHC channels А B C 
А RHC channels А B (P,Y)* С В (Ву 
L RPTA channels A B C 
R RPTA channels A B C 
L SBTC channels A B C 
R SBTC channels A B C 
| THC channels A B C 
A THC channels A B C 


* The АЕТ RHC Pitch and Yaw axes are channelized thru FF2, but Roll goes thru FF4. 
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Figure 1-9. Flight controller power distribution - commander 
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1.7 QUESTIONS 

1. During ascent, which controller can be used to manually control main engine thrust? 
2. Explain the functions of the THC. 

3. What effect would the loss of main bus A have on the pilot's controllers? 


4. п what way would the loss of MDM FF 2 affect the pilot's station? 
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2.0 ROTATIONAL HAND CONTROLLER 
2.1 ROTATIONAL HAND CONTROLLER USE 


2.1.1 Forward RHC Use 


The RHC frame of reference used by the commander and pilot is the standard 
reference system used for the FCS. Depicted in Figure 2-1 are the positive (+) 
deflections of the RHCs by axis and the corresponding orbiter movements. 
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Figure 2-1. Positive deflections of the RHC by axis 
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2.1.2 Aft Station Control 


The aft station has two sets of windows (Figure 2-2) so that the crew can look along the 
-X or the -Z axis of the orbiter. Since there is only one set of aft station controllers, an 
RHC and a THC, a visual control reference must be established on the basis of the 
crewmembers' line of sight. This is accomplished with the aft sense switch on Panel 
A6U (Figure 2-3). The -Z position of the switch selects the line of sight reference about 
the -Z axis (overhead windows), and the -X position selects the line of sight reference 
about the -X axis (aft windows). 
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Figure 2-2. Aft station windows 
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Figure 2-3. Aft sense switch 
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2.2 HARDWARE 


2.2.1 RHC Mechanical Limits 


As illustrated in Figure 2-4, an КНС mechanical hardstop (the maximum deflection that 
can be obtained in an axis) occurs at +24.3° in the pitch and roll axes, and at +14.3° in 
the yaw axis. A built-in resistance (softstop) occurs before the hardstop, at +19° to +20° 
in the pitch and roll axes, and at +9.5° to +10.5° in the yaw axis. 


2.2.2 RHC Stick Forces 


The static torque, or force, required to deflect the RHC varies by axis and also differs 
between the forward RHCs and the aft RHCs. 


SoftstoP | Softstop SoftstoP Softstop 
49-20? _ | | 19.20» 49-20 19-20% 
HardstoP | Hardstop 
24.3? 


HardstoP Har dstop 


4— 245 м 


Softstop 


Hardstop 


+ 


PS 
9.5-10.5 1 
9.50.5 | 


Hardstop 
Pivot Softstop 


Жы point 


Pitch Roll Yaw 
иза006498 038 


Figure 2-4. RHC mechanical limits 
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2.3 SOFTWARE 


Deflection signals from each RHC undergo software processing before being displayed 
to the crew or being incorporated into the FCS. During OPS 2 and 8, redundant КНС 
signals can be seen on crew displays before being processed by the RM software. As 
illustrated in Figure 2-5, the normal software flow from the RHCs to the FCS is through 
RM and a Subsystem Operating Program (SOP). 


2.3.1 Nominal and Abort Timeline 


For a nominal mission, the crew has manual control of the RHC during every MM 
except terminal countdown (MM 101). During ascent and transitional flight (MMs 102 - 
106, and 301 - 303), the соттапдег and pilot's RHCs have three-axis (roll, pitch, and 
yaw) control. For orbital flight, any of the three stations can input three-axis control 
commands to the FCS. During entry and landing (MMs 304 - 305), the соттапдег 5 
and pilots RHCs have two-axis (roll and pitch only) capability. Yaw (sideslip) is 
controlled by the Aerojet Digital Autopilot (DAP). Roll, pitch, and yaw aerosurface 
deflection trim is controlled via the panel trim switches, while roll and pitch vehicle rate 
trim is controlled with the trim switches on the RHC. The aft sense switch indicates to 
the software how the aft RHC should be transformed. 


For a Return-To-Launch Site (RTLS) abort, both the commander's and pilot's RHC have 
three-axis capability during MM 601, and roll and pitch capability during MM 602 and 
MM 603. 
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Figure 2-5. Rotational hand controller software overview 
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2.3.2 RHC Programs 


RHC software data flow for all axis programs is triply redundant. In the two-axis 
program, roll and pitch signals come from the commander's (left) or pilot's (right) RHC 
(Figure 2-6). The redundant signals go through an RM process and then to the SOP, 
before being passed to the Aerojet DAP. In the three-axis program, yaw signals also 
come from the commander's and pilot's RHCs(Figure 2-7). In the orbit three-axis 
program the aft station signals, aft sense switch indication, and crew 
deselection/reselection capability via keyboard item entry are also added (Figure 2-7). 
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Figure 2-6. RHC software data flow, two axis program 
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Figure 2-7. RHC software data flow, three-axis program 
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2.3.3 RHC Subsystem Operating Program 


The two- and three-axis RHC SOPs perform several major functions. First, the RHC 
voltage output is converted to degrees. Next, Data Good (DG) flags for each axis on 
each RHC, sent by RM, are checked. If any DG flag on an RHC is false (bad) then all 
output commands from that RHC are set to zero. If the DG flags are set to true (good), 
then a breakout deadband (1.257 in roll, 1.15° in pitch, and 0.65° in yaw) is checked to 
allow for stick play. 


When an RHC signal exceeds an axis-specific detent limit, the SOP generates a 
discrete signal which takes the DAP from automatic mode (AUTO) to Control Stick 
Steering (CSS). This method of manual takeover is referred to as "hot stick" 
downmoding. Hot stick downmode is not available during the Ascent DAP, where a 
CSS Pushbutton Indicator (PBI) must be depressed for manual inputs to be 
implemented in the FCS. Additionally, any change from AUTO to CSS during ascent 
will occur in all axes. 


While in transitional or orbital DAP, the RHC SOP generates an additional discrete 
when an RHC axis exceeds the softstop. This will change the RHC mode to an 
acceleration command if the RHC deflection exceeds the softstop in a particular axis. 
Such a change affects the RCS jet firings, it has no affect on the OMS. 


Finally, the RHC SOP algebraically sums any RHC inputs from all RHCs to generate 
manual roll, pitch, and (if three-axis) yaw commands 


2.4 CREW DISPLAYS 


The crew displays discussed below are shown in Figure 2-8. 


The GNC SYS SUMM 1 display (called up by entering SPEC 18 or pressing the SYS 
SUMM key) shows channel status indications (1, 2, and 3 for channels A, B, and C) for 
the left, right, and aft RHCs. (The aft RHC is not operational in OPS 1, 3, and 6.) The 
following status indicators will appear on the GNC SYS SUMM 1 display for the left, 
right, and aft RHCs: 


“|” for an RM failure (channel basis), or crew deselect 
“?” for RHC dilemma (channel basis) declared by RM 
"M" for missing data (channel basis) from FCOS, comm fault condition 


The RM ORBIT display (SPEC 25) is available in OPS 2. The triply redundant RHC 
commands are displayed for the left, right, and aft RHCs. Roll and yaw commands are 
preceded by R or L (right or left), and pitch commands are preceded by U or D (up or 
down). The percentage of RHC full-scale deflection is displayed on a scale from 

0 to 99. The following data status indicators will appear on the RM ORBIT display for 
the left, right, and aft RHCs: 
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“00” for no sensed command or power is off 
“|” for ап RM failure (channel basis), or crew deselect 
“2” for RHC dilemma (channel basis) declared by RM 


"M" for missing data (channel basis) from FCOS, comm fault condition 
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Figure 2-8. Crew displays 
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The crew can deselect or reselect a candidate for Selection Filter (SF) processing by 
entering the appropriate item number and pressing the EXEC key. An asterisk (*) 
appears for the deselected candidate in the Deselect (DES) column. 


Entering Item 16 SW RM INH (switch RM inhibit) inhibits or enables the GN&C Switch 
(SW) contact RM. An asterisk is displayed after the item number when the inhibit is in 
force. 


The CONTROLLERS display (SPEC 43) is available in OPS 8. It works the same way 
the RM ORBIT display does (except that it has no SW RM INH item). 
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2.5 QUESTIONS 

1. Define RHC hardstop. 

2. Whatis the purpose of the ай sense switch with regard to the КНС? 

3. Three-axis КНС capability is possible for all flight phases except in later MMs of 
OPS 3 and 6. Therefore, during an RTLS abort, three-axis RHC capability is 
possible only for which ММ? 


4. Та crewmember desires CSS on ascent, what is the procedure for achieving it? 
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3.0 TRANSLATIONAL HAND CONTROLLER 
3.1 TRANSLATIONAL HAND CONTROLLER USE 


3.1.1 Forward Line of Sight THC Reference 


The forward line of sight THC reference used by the commander is the standard 
reference used for the FCS. Figure 3-1 illustrates the positive deflections of the THC by 
axis and the corresponding orbiter movement. 


3.1.2 Aft THC Use 


The aft and overhead windows allow the aft crew to look along the -X or -Z axis of the 
orbiter while operating the THC. The aft sense switch must be in the proper position 
(-X for aft windows and -Z for overhead windows) in order for the aft THC commands to 
be correctly transformed to give the desired orbiter movement. 


Note: То use the rear THC, push the THC in the direction of desired vehicle 
movement. In the overhead -Z aft position, visualize the THC mounted on the 
same plane as the -Z window. 


All commands to the Forward line-of-sight ine-of-si f қ Overhead line-of-sight 
flight control system reference THC use ж ко «оек -х | reference; aft THC use sense 
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Figure 3-1. Positive deflections of the THC 
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3.2 THC HARDWARE 


3.2.1 THC Mechanical Limits 


During orbit insertion, on-orbit, and deorbit operations, crewmembers use the THC to 
control the vehicle vertical, lateral, and longitudinal movement with RCS jets. The 
normal displacement of the THC is 0.5 inch from the center null position in both 
directions along each of the three THC axes, respectively. 


3.2.2 THC Forces 


A force of 2 pounds is required to deflect either THC 0.5 inch in each axis. The output 
of the THC is a voltage level of either O or 5 volts in each axis. A displacement of 
0.35 inch to 0.5 inch will cause the 5-volt output. The THC is illustrated in Figure 3-2. 
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Figure 3-2. THC 
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3.3 THC SOFTWARE 


The THC has six positions; a positive and negative position for each of the three axes. 
Each position has three contacts, similar to a three-contact switch. As illustrated in 
Figure 3-3, the redundant signals from the forward and aft THCs go through an RM 
process and then to a SOP, before being passed to the FCS (on-orbit DAP). Failures 
and dilemma conditions from RM go to the crew interfaces. The crew has deselection/ 
reselection capability of THC signals via keyboard item entries on SPEC 25 or SPEC 43 
during OPS 2 and OPS 8. 
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Figure 3-3. THC software data flow 


3.3.1 Nominal and Abort Timelines 


The forward THC is available for use in all three vehicle axes, in MMs 103, 104, 105, 
106, 201, 202, 801, 301, 302, and 303. During RTLS aborts, the forward THC is 
available in MM 601. The aft THC is available for use only in OPS 2 and OPS 8. 
Failures and dilemma conditions from RM go to the crew interfaces. The crew has 
deselection/reselection capability of THC signals via keyboard item entry during OPS 2 
and OPS 8. 


3.3.2 THC Software Operating Program 


The THC SOP monitors the sense switch position and transforms the aft station THC 
commands, from the -X or -Z sense to the forward station sense. If a forward THC 
positive signal or a transformed aft THC positive signal is present, the THC SOP 
generates a positive signal. If a forward THC negative signal or a transformed aft THC 
negative signal is present, it generates a negative signal. When both crew stations 
generate conflicting translation commands, the output translation command is zero. 
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3.4 CREW DISPLAYS 


3.4.1 GNC System Summary Display (OPS 2, 8, and 3) 


During OPS 2, 8, and 3, THC failures and dilemmas will trigger the SM alert light and 
tone and the fault message: SBTC/THC L (A) (aft THC is annunciated in OPS 2 and 
OPS 8 only, no THC annunciation occurs in OPS 1). The displays discussed in this 
section can be found in Figure 3-4. 


The СМС SYS SUMM! display shows channel status indications (1, 2, and 3 for 
channels A, B, and C) for the left and aft THCs. There are no crew controls for this 
display. The following status indicators will appear on the GNC SYS SUMM 1 display 
for the left and aft THCs: 


“|” for an RM failure (channel basis), or crew deselect 
“2” for THC dilemma (channel basis) declared by RM 
"M" for missing data (channel basis) from FCOS, comm fault condition 


3.4.2 RM ORBIT Display (OPS 2 Only) 
The RM ORBIT display shows the triply redundant THC commands for the left and aft 


THC. THC x, y, and z commands are preceded by а “+” or a “-“ as referenced to each 
axis. 


The following data status indicators will appear on the RM ORBIT display for the left and 
aft THCs: 


Blank: No sensed THC Command (CMD) for the transducer 

“|” for THC failure (parameter basis), or crew deselection (three in a row) 

“2” for the THC dilemma (parameter basis) declared by RM 

"M" for missing data (channel basis) from the FCOS, comm fault condition 

The crew can deselect or reselect a candidate for Selection Filter (SF) processing by 
entering the appropriate item number and pressing the EXEC key. An asterisk (*) 
appears for the deselected candidate in the DES column. 

The current Selection Filter (SF) status is maintained across MM and OPS transitions. 
3.4.3 CONTROLLERS Display (OPS 8) 


The CONTROLLERS display works the same way as the RM ORBIT display for the left 
and aft THC. Figure 3-4 illustrates an example of an RM-sensed failure of channel 3 of 
the + X THC axis position of the aft THC. 
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А second failure (a disagreement between channels 1 and 2 of the + X position of the 
aft THC) appears as a dilemma (two question marks) on SPEC 25 and SPEC43. 


A third failure in the form of a comm fault (missing data) on channel 2 (all axes) would 
be displayed as “M.” 


An example of all the channels of the left THC deselected by the crew for checkout 
purposes would appear as nine down arrows and three asterisks in the DES column. 
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Figure 3-4. Crew displays during OPS 2, 3, and 8 
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3.5 QUESTIONS 


1. Why is the aft sense switch important for aft THC use? 


2. Ifthe commander and aft crew generate conflicting THC commands, what will the 
resultant translation output command be? 


3. How can a crewmember confirm a THC failure after failure annunciation? 
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4.0 SPEEDBRAKE/THRUST CONTROLLER 
4.1 SPEEDBRAKE/THRUST CONTROLLER USE 


4.1.1 Manual Throttling During Ascent 


The SBTC lever is illustrated in Figure 4-1. When the SBTC lever is rotated backwards 
to the stop, the throttle setting of the Space Shuttle Main Engines (SSMEs) is 
commanded to minimum percentage. The lever positioned at the forward stop 
commands maximum percent throttle setting of the SSMEs. These max/min throttle 
settings are dependent on guidance I-loads for each particular flight. l-loads are initial 
software loads of various parameters put into a system before a flight, and are usually 
not changed. By using the SBTC during ascent, the SSME thrust is controlled 
manually. 


Forward stop 


Backstop 


Forward 
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Figure 4-1. Speedbrakelthrust controller 


4.1.2 Speedbrake Control During Entry 


The speedbrake is commanded fully open when the SBTC lever is positioned at the 
backstop, and is commanded closed at the forward stop. During early entry, the vehicle 
pitching moment is affected by opening and closing the speedbrake. Later in the entry, 
the speedbrake is used to help control the vehicle speed/energy by modulating the 
position of the speedbrake, either open or closed. 
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4.2 HARDWARE 


4.2.1 SBTC Takeover Switch 


The SBTC takeover SW, illustrated in Figure 4-2, is a momentary pushbutton used to 
gain manual throttling control for the right SBTC only or to gain or transfer manual 
speedbrake control of either SBTC (Figure 4-2). 


Speedbrake 
takeover 
switch 


td112_004.cnv 


Figure 4-2. Speedbrake takeover switch 


4.2.2 Manual Speedbrake Control 


The speedbrake is typically under automatic control. The top half of both SPD 
BK/THROT РВІѕ (AUTO) will be illuminated. Either SBTC can be enabled for manual 
speedbrake control as follows: 


Depress the SBTC takeover switch. If the commander depresses the SBTC takeover 
switch the bottom half (Manual - MAN) of the commander’s PBI will be illuminate (Panel 
F2) and the pilot’s PBI will extinguish (Panel F4). Similarly, if the pilot takes control, the 
bottom half (MAN) of the pilots PBI will illuminate and the commander's PBI will 
extinguish. Only one person can have manual control of the speedbrake at a time. The 
person who depressed the SBTC takeover switch last has manual control. To place the 
speedbrake back under software control, either PBI can be depressed. The top half 
(AUTO) of both PBIs will illuminate (Figure 4-3). 
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Figure 4-3. Manual speedbrake control 
4.2.3 Manual Throttling 


Engine throttling is usually under automatic control. The top half of both SPD 
BK/THROT PBls (AUTO) will be illuminated. Only the right SBTC сап be enabled for 
manual throttle control as follows: 


Depress and hold the takeover switch on the right SBTC. Both AUTO PBI lights will 
extinguish. With the takeover switch depressed, the computer throttle command is 
"frozen" at its current value. While depressing the takeover switch, move the SBTC to 
match the frozen computer command. Manual control is established when the match is 
achieved within 4 percent. When the match is achieved, the SPD BK/THROT MAN PBI 
light on the pilot's side of the cockpit illuminates. The takeover switch may then be 
released. If the takeover switch is released before a match is achieved, the system 
reverts to computer-generated (auto) commands. 


Note that when the takeover switch is depressed, the upper left field of the ascent/entry 
primary flight display (A/E PFD) will also display “Throt: Man" with a yellow box 
outlining the field (Figure 4-4). However, this does not indicate that manual control has 
been achieved yet. 


When under manual throttle control, depressing either or both auto PBls shall cause the 
system to revert to the auto mode, extinguishing the pilot's MAN light, and illuminating 
both AUTO PBI lights. 


Transferring back to auto during an RTLS abort leaves the throttle at the last 
commanded manual setting. Fine mass control will only occur if transfer back to auto 
throttles is completed pre-powered pitch around. 
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Figure 4-4. Manual throttle control 
4.3 SOFTWARE 


4.3.1 Nominal and Abort Timeline 


During MMs 102, 103, and 601, the pilot can perform manual throttling of the main 
engines. As illustrated in Figure 4-5, the selected right-hand manual takeover, manual 
throttle command, DG indicator, and AUTO PBI command are output by RM to the 
SBTC SOP. When the SOP receives the manual takeover indicator, the manual throttle 
DISC (discrete) is output to guidance, causing the guidance-generated auto throttle 
command to be "frozen." A comparison of the auto throttle command from guidance 
and the pilot's manual throttle command is performed in the SOP, and when a match 
within 4 percent tolerance is made, manual control is established and the manual 
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throttle command is output by the SOP. The SOP also controls the lighting of the SPD 


BK/THROT PBI lamps. 


During MMs 304, 305, 602, and 603, the pilot or commander can manually control the 
speedbrake. The software flow for manual speedbrake control is illustrated in 

Figure 4-6. RM processes the takeovers and the manual commands from the SBTCs, 
as well as the AUTO РВІѕ. The SBTC SOP performs station selection of the manual 
SBTC commands for output to the autopilot. The autopilot handles the lighting of the 


SPD BK/THROT PBI lamps. 


The crew has channel deselection/reselection capability for signals from both SBTCs in 
OPS 8 for system checkout purposes. 
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Figure 4-5. SBTC Manual Throttle Processing 
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Figure 4-6. SBTC Manual Speedbrake Processing 
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4.4 SBTC SOP 
The SBTC SOP performs five functions. 


1. И converts the selected manual speedbrake command from volts to degrees for 
flight control. 


2. It performs station selection for manual speedbrake commands during OPS 3 and 
OPS 6, which means 


e The output command is chosen from the crewmember who last depressed the 
takeover switch. 


e |fthe command selected for output has a bad "DG" flag, then the output 
command will be held to the value of the last output command. 


е ЇЇ both crew stations generate simultaneous takeover commands, the 
commander will have precedence. 


3. The SBTC SOP also provides takeover latch flags for flight control (OPS 3 and 
OPS 6) to identify the crewmember presently in manual control. This allows the 
correct РВ! (bottom half) to be illuminated. 


4. И converts the compensated manual throttle command to a manual throttle setting 
in percent for guidance. 


5. It provides auto and manual flags to illuminate the SBTC РВ! in ММ 102, 103, and 
601. 
4.5 SBTC CREW DISPLAYS 


The GNC SYS SUM 1 displays SBTC statuses for RM-declared failures, dilemmas, and 
commfaults in OPS 3 and OPS 6 only. Figure 4-7 indicates a failure on channel 1 of the 
left SBTC and a dilemma for channels 2 and 3. 


“|” for an RM failure (channel basis) 
“2” for SBTC dilemma (channel basis) declared by RM 
"M" for missing data (channel basis) from FCOS, comm fault condition 


The CONTROLLERS display is available in OPS 8 for displaying left and right SBTC 
commands. The triply redundant commands are displayed in percent of speedbrake 
extension. The crew has channel deselection capability for each SBTC. Figure 4-8 
indicates that the left SBTC lever is deflected to command 65 percent of speedbrake 
extension. 
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Figure 4-7. GNC SYS SUMM 1 display, OPS 3 and 6 
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Figure 4-8. CONTROLLERS display, OPS 8 
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4.6 QUESTIONS 


How is manual control of the main engine throttling gained? 
2. Howis manual control of the speedbrake gained? 


3. During entry, an SBTC lever placed at the forward stop commands the speedbrake 
to what position? 


4. How сап the crew deselect a bad SBTC channel? 
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5.0 RUDDER PEDAL TRANSDUCER ASSEMBLY 
5.1 RUDDER PEDAL TRANSDUCER ASSEMBLY USE 


The RPTA consists of a black box with a set of triply redundant transducers and a 
mechanical input arm. They generate an electrical signal output for a set of 
conventional rudder pedals controlling the position of the rudder for manual yaw control. 
The commander and pilot's RPTAs are mechanically linked. The compensated signal 
with the largest magnitude is selected as the yaw command. 


The rudder pedal position adjustment range is 3.25 inches maximum forward or aft from 
the neutral position in 0.81-inch increments (nine positions). The breakout force is 

10 pounds. To depress a pedal to its maximum forward or aft position requires a pedal 
force of 70 pounds. 


The RPTA is illustrated in Figure 5-1. 
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Figure 5-1. RPTA 
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5.2 RPTA SOFTWARE 


Triply redundant signals from each RPTA undergo software processing before being 
incorporated into the FCS (Figure 5-2). The nominal flow from the RPTAs is through 
RM and the RPTA SOP. During OPS 8, the crew may view the redundant rudder pedal 
software commands and deselect any failed RPTA channel (Figure 5-3.) 


5.2.1 Nominal and Abort Timelines 


Nominal and abort operations available for the RPTAs are MMs 304, 305, 602, and 603. 
The rudder pedals are active below М=5 if roll/yaw CSS is selected. Although RM runs 
in the above MMs, no fault message is annunciated for RPTA failures. 
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Figure 5-2. RPTA software data flow 


5-2 


USA006498 
RevA 


8011/0437 CONTROLLERS 2 25107 Ss SE OZ 
000/01: 30: 00 


Р ЈЕ 

035 О 

USE О 

BDY FILIP 0344 0 
UPDNDES 1 

11» 18) 
* 


ШК 


О 


со — [03 O1 SUN N [TI 
an 


і 


SW 


ШЕР 


ж 


гч Ех 


usa006498 049.cvx 


Figure 5-3. CONTROLLERS display, OPS 8 


5.3 RPTA SOP 


The RPTA SOP converts selected transducer commands from volts to degrees. It 
performs station selection by selecting either the right or left RPTA signal, provided that 
the associated DG flag is true (data is good) and the command has the largest 
magnitude of the two. If both DG flags are not true (data is bad), the selected signal 
shall be set to zero. 


The RPTA SOP also applies a breakout deadband of + 1.125? to the station-selected 
command. 
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5.4 QUESTIONS 


1. The RPTA generates an electrical signal output for which set of rudder pedals? 
2. Which set of rudder pedals has priority and why? 


3. The right or left RPTA signal is output to flight control, provided that what conditions 
exist? 
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6.0 SWITCHES 


6.1 OVERVIEW 


This section provides general information, rather than material for self-instruction. The 
name of each flight control switch is presented, along with its picture, panel location, 
purpose, and use. The crew checkout capabilities and the displays associated with 
each switch are also included. 


6.2 BODY FLAP SWITCHES 


The dually redundant Body Flap (BF) switches (Panels L2 and C3) are used for manual 
BF slew commands when the BF control mode is manual. (Figure 6-1) When the 
switch is in the UP position, the BF will rotate upward, and when the switch is in the 
down position, the BF will rotate downward. 
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Figure 6-1. Body Нар switches, Panels 12 and C3 
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6.2.1 Body Flap Control Logic 


During manual BF Slew command processing (BF SLEW SOP), a manual BF UP 
command is generated for flight control if a left BF UP command or a right body flap UP 
command is present. À manual body flap DOWN command is generated for flight 
control if a left BF DOWN command or a right BF DOWN command is present. 

(Figure 6-2) When both crew stations generate conflicting commands, a BF ОР 
command shall be output to flight control, as UP has priority. 


The BF is typically under automatic control with both BODY ЕГАР PBls indicating 
AUTO. To place the BF under manual control, either of the BODY FLAP РВІѕ сап be 
depressed. The AUTO will extinguish and both Manual (MAN) lights will illuminate. To 
go back to automatic software control, either of the BODY FLAP РВ can be 
depressed. The BF control mode will then change from manual to auto, the MAN lights 
will extinguish, and both AUTO PBIs will illuminate. 
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Figure 6-2. Body flap control logic 
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6.2.2 Body Flap Switch Checkout - OPS 8 


The contacts of the BF switches can be checked out by using the CONTROLLERS 
display in OPS 8 (Figure 6-3). An up or down BF switch position is shown as "*" for 
each contact of the left and right BF switches. The crew has deselect capability for a 
failed switch contact. 


6.2.3 Body Flap Pushbutton Indicator 


The BF PBl is triply redundant. When depressed, it changes the BF control mode from 
manual to automatic, or from automatic to manual. (Figure 6-4) 


6.3 CSS INDICATORS 


Pitch and roll/yaw FCS mode PBls are triply redundant. During ascent, depressing апу 
of the four CSS PBls will mode flight control to augmented manual in all axes. All four 
CSS PBI lights will light and all four AUTO lights will extinguish. During entry, 
depressing a CSS PBI will mode flight control to augmented manual in the 
corresponding axis. Both CSS lights will light, and both AUTO lights will extinguish in 
the corresponding axis. 


During ascent, depressing any of the four AUTO PBIs will mode flight control to 
automatic in all axes. All four AUTO PBls will light and all four CSS lights will 
extinguish. 


During entry, depressing an AUTO PBI will mode flight control to automatic in that axis. 
Both AUTO lights will light and both CSS lights for that axis will extinguish. FCS mode 
PBls are shown in Figure 6-5. 


During OPS 8, a light check can be performed with the FCS dedicated checkout display, 
FCS/Dedicated (DED) DIS Checkout (C/O), illustrated in Figure 6-5. These lights 
include the event sequence, FCS mode speedbrake, and body flap AUTO/MAN lights 
(13 lights for each side on F2 and F4). An item 7 EXEC turns the lights on 
simultaneously, and an item 8 EXEC turns the lights off. 
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Figure 6-3. BF switch checkout 
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Figure 6-4. Flight control system PBI 
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Figure 6-5. FCS/DED display checkout, OPS 8 
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6.4 FCS MODE SWITCHES 


During OPS 8 on SPEC 42, an “*” under AUTO or CSS for Pitch (P) and Roll/Yaw (R/Y), 
Auto (AUT) or Manual (MAN) for speedbrake, and AUTO for BF indicates the contact is 
in that position. An “М” denotes missing data (comm fault condition). Blank denotes 
okay. The item XX EXEC alternately deselects and reselects a contact for SF 
processing (deselect status carried over to OPS 3). Deselection causes an entire set of 
contacts for all FCS mode switches to be deselected. An asterisk (*) appears for the 
deselected state in the DES column. (Figure 6-6) 
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Figure 6-6. SWITCH/SURF display 
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6.5 ENTRY MODE SWITCH 


The entry mode switch is quadruply redundant and found on Panel L2. (Figure 6-7) 
During entry (MMs 304, 305, 602, and 603), positioning the switch to LO GAIN will 
reduce the pitch, roll, and yaw command gain by half in the DAP. During entry, the NO 
YAW JET position of the entry mode switch deactivates the yaw jets and causes the 
ailerons and/or rudder (when enabled) to be used to control sideslip. 
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AUTO 


T LO GAIN 


ue 
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Figure 6-7. Entry mode switch, Panel 12 


The contacts of the entry mode switch can be checked out by means of the SWITCHES 
display in OPS 8. For each switch contact, an asterisk will be displayed on the 
SWITCHES display (Figure 6-8) to indicate that the contact closed position has been 
sensed (contact 2 of low gain). An "M" will be displayed if the signal data are missing 
for any of the contacts (contact 3 of Low Gain and NO Y/J). Item entries 1 through 4 
allow crew deselection or reselection of a particular set of switch contacts as candidates 
for switch RM. An asterisk will be displayed next to the item number to indicate 
deselection, and will be blank when the contacts are selected for use by RM. 
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Figure 6-8. SWITCHES display, OPS 8 


6.6 COMMANDER AND PILOT BACKUP FLIGHT CONTROL ENGAGE PBIs 


The BFS is engaged by depressing the red BFS button located on either the 
commander's or pilot's RHC. 


ABackup Flight Control (BFC) light indicates that the BFS has been engaged. 
(Figure 6-9) 
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Figure 6-9. BFS engage switch 
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6.7 ABORT MODE SWITCH 


The abort mode switch (Figure 6-10) is triply redundant. It initiates an RTLS, an Abort- 
To-Orbit (ATO), or a Transoceanic Abort Landing (TAL) abort mode when placed in the 
desired position with the ABORT РВ! depressed. 


The ABORT PBI light is driven by ground command over the GPC 5 backup computer- 
payload MDMs 1 and 2. The light is used as an annunciator for the crew and depends 
on the time and type of failure. (Illumination of the light is not an indication that the 
selected abort mode has been implemented, but it is for crew awareness.) 
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Figure 6-10. Abort mode switch, Panel F6 
6.8 TRIM SWITCHES 


6.8.1 Trim Switch Station Select 


Panel trim switch software data flow is illustrated in Figure 6-11 and commands pitch, 
roll, and yaw aerosurface deflection rates. Trim switch software is available in 
MMs 304, 305, 602, and 603. 


When the trim inhibit signal is absent for a crew station, the selected trim signals from 
that station are enabled. A resultant positive pitch, roll, or yaw trim signal is generated if 
a selected left positive trim signal or a selected right positive trim signal is present. A 
resultant negative pitch, roll, or yaw trim signal is generated if a selected left negative 
trim signal or a selected right negative trim signal is present. 


When both crew stations generate conflicting trim commands in an axis (e.g., if the 


commander generates a positive pitch trim and the pilot generates a negative pitch trim 
simultaneously), the resultant trim command in that axis is zero. 
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Figure 6-11. Trim switch software data flow 
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RHC trim switches command vehicle pitch and roll rate with the corresponding FCS 
mode in CSS (pitch or roll). A resultant positive pitch or roll trim signal is generated if an 
enabled left positive trim signal or an enabled right positive trim signal is present. A 
resultant negative pitch or roll trim signal is generated if an enabled left negative trim 
signal or an enabled right negative trim signal is present. RHC trims are generated by 
moving one of the dually redundant RHC trim switches. Constant vehicle rates can be 
commanded about the body pitch and roll axes. Each RHC has a trim switch, but only 
the commanders and pilots have vehicle trim capability. 


6.8.2 РНСІРМІ Trim Enable/Inhibit Switch 


Trim enable switches for both the commander and pilot are illustrated in Figure 6-12. 
The dually redundant RHC/panel trim enable/inhibit switches on Panel F3 provide 
signals to the GPCs, disallowing software execution of the associated RHC and panel 
trim input when in the inhibit position. The enable position is not wired to the GPCs, so 
trimming is allowed to take place with the corresponding FCS mode in CSS (pitch or 
roll). The dually redundant trim panel ON/OFF switches on Panel F3 provides power to 
the associated roll, pitch, and yaw panel trim switches when in the ON position. The 
dually redundant roll, pitch, and yaw panel trim switches on Panels C3 and L2 
command an aerosurface deflection. 
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Figure 6-12. RHC trim enable switches 


After Weight On Wheels (WOW) is set, PASS software ignores the position of the 
RHC/PNL switch and honors negative pitch commands from the left or right RHC beep 
trim. This allows the RHC/PNL switch to remain in the INHIBIT position throughout 
entry, while preserving the use of beep trim derotation. 


During OPS 8, RHC and panel trim status can be checked on the CONTROLLERS 
display (Figure 6-13). Crew controls consist of item XX EXEC, which alternately 
deselects and reselects a candidate for RM processing. An asterisk (*) appears for the 
deselected state in the DES column. Data status indicators are “М” for missing data, 
and blank for no sensed command. RHC trim status indicators use only R and P 
columns (R-right roll trim, L-left roll trim, U-up pitch trim, and D-down pitch trim). Panel 
trim status indicators use R, P, and Y columns (R-right roll/yaw trim, L-left roll/yaw trim, 
U-up pitch trim, and D-down pitch trim). 
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Figure 6-13. CONTROLLERS display, OPS 8 


6.9 CHANNEL SWITCHES 


The triply redundant FCS channel switches are located on Panel C3 (Figure 6-14). 
The OVERRIDE position is hardwired to the GPCs and provides the capability to reset a 
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channel that has been bypassed by the fault detection logic. OVERRIDE and AUTO 
allow power to flow to the Aerosurface Amplifier (ASA) and Ascent Thrust Vector 
Control (ATVC) switches. Moving the switch to OFF removes power from the ASA and 
ATVC switches, thus powering down the respective ASA and ATVC. 
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Figure 6-14. FCS channel switches, Panel C3 
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6.10 SENSE SWITCH 


The aft sense switch, located on Panel A6U, is triply redundant. (Figure 6-15) As 
mentioned previously, the sense switch is used to mode the aft RHC, THC, and the 
Attitude Display Indicator (ADI) to correspond to the operator's viewing direction. 


6.10.1 Aft Sense Switch Default Position 


The default position for the aft sense switch is the -Z position of the switch. If both 
positions (-X and -Z) are indicated, the -Z default position will be output by RM and a 
class 3 annunciation (SM alert light on F7, tone, and a default message) will occur. If 
neither position (-X or -Z) is indicated, the -Z default position will be output by RM, and a 
class 3 annunciation will occur. 


The orbit three-axis RHC SOP transforms the aft RHC outputs based on the sense 
switch position prior to any station selection. 


6.11 ORBITAL DAP/TRANSLATION/ROTATION SWITCHES 


6.11.1 Orbital DAP/Translation/Rotation Switch Processing 


The orbital DAP РВІѕ are processed in the following way. Station selection is made 
when there is presence of a forward station or its corresponding aft station РВ! discrete, 
causing that PBI indication to be input to flight control. 


The PBl is illuminated when the mode is implemented in the FCS. 


Orbital DAP control and select PBls are triply redundant. The orbital DAP select РВІѕ 
are used on orbit in the following manner. Depressing SELECT A implements DAP 
load A settings for the on-orbit DAP gains. SELECT A lights (forward and aft) are 
illuminated, and SELECT B lights are extinguished. Depressing SELECT B implements 
DAP load B settings for the on-orbit DAP gains. SELECT B lights (forward and aft) are 
illuminated, and SELECT A lights are extinguished. DAP A and B PBls are, therefore, 
mutually exclusive. The DAP A and B configurations are defined on the OPS 2 and 
OPS 8 DAP configuration spec function. 
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Figure 6-15. Aft sense switch, Panel A6 
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Orbital DAP control PBls, used for transition and on orbit, function as follows. 
Depressing CONTROL AUTO modes the DAP (transition and on orbit) to an automatic 
mode. AUTO lights (forward and aft) are illuminated, and other CONTROL lights are 
extinguished. Depressing CONTROL INRTL modes the DAP (transition and on orbit) to 
a manual inertial mode, with automatic inertial attitude hold when no RHC input is made 
and DISC RATE rotation PBls are illuminated. AUTO, INRTL, ІМЕН, and FREE PBls 
are all mutually exclusive. This mode is also initiated by deflecting the RHC out of 
detent while operating in the automatic mode. The manual РВІѕ will illuminate and the 
auto PBIs will extinguish. The CONTROL МЕН PBI invokes the same control mode, 
except that a Local Vertical/Local Horizontal (LVLH) attitude hold will be in effect. 


In OPS 2 and OPS 8 only, the CONTROL FREE PBI modes the DAP to free drift; that 
is, no attitude hold or automatic maneuvers are supported. 


Depressing PRI enables the primary RCS jets for rotational control using a table-lookup 
scheme and firings and disables the vernier jets. NORM lights are illuminated (forward 
and aft), and VERN lights are extinguished. 


Depressing VERN enables the vernier RCS jets for rotational control and disables the 
primary jets. VERN lights are illuminated (forward and aft), and NORM lights are 
extinguished. PRI, ALT, and VERN PBls are all mutually exclusive. 


RCS JETS ALT enables the use of primary jets, but in an alternate selection scheme 
that is more propellant efficient and imparts smaller structural loads on the vehicle. 


To ensure PBI prioritizing, simultaneous, conflicting commands will be treated as 
follows: DAP load A has priority over DAP load B; INRTL has priority over AUTO, which 
has priority over FREE, which has priority over МЕН; and primary RCS has priority over 
vernier RCS, which has priority over alternate. 


6.12 MANUAL MODE PBIs 


The manual mode PBIs are illustrated in Figure 6-16. Manual mode (translation/ 
rotation) PBls are dually redundant. Manual mode rotation PBls are used on orbit and 
during trans-DAP operation. 


The RCS rotation mode is selected on an axis-by-axis basis. Mixing of modes is 
allowed. Depressing Discrete (DISC) rate for an axis causes the appropriate primary or 
vernier thrusters to fire to attain a predetermined rotational rate in that axis, while the 
RHC is out of detent. When the RHC is returned to detent, the rate is nulled and a new 
attitude hold is established. 
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Figure 6-16. Orbital DAP and manual mode PBIs 


extinguished for the applicable axis. 


Depressing PULSE for an axis causes the appropriate primary or vernier thrusters to 
fire for preset increments (degrees per second) in response to each deflection of the 
RHC in that axis. No further firing occurs until the RHC is returned to detent and 
deflected again, allowing attitude to drift freely. The PULSE PBls are illuminated 
(forward and aft) and the DISC RATE PBls are extinguished for the applicable axis. 
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Whether in DISC RATE or PULSE, when the КНС is deflected beyond the soft stop, the 
ACCEL mode is invoked in that axis, in which jets fire continuously until the КНС is 
returned to inside the softstop. 


Manual mode translation РВІѕ are also used on orbit. Mixed modes are permitted on an 
axis-by-axis basis. 


Depressing HIGH Z for the Z-axis causes all primary *Z thrusters (up firing jets) to be 
fired as long as the THC is held out of detent in that axis. The HIGH Z РВ! are 
illuminated (forward and aft) and the LOW Z, Z NORM, and 2 PULSE PBls are 
extinguished. Depressing LOW Z causes + X jets to be fired, giving a small upward 
component for + Z translation only for as long as the THC is held out of detent, and 
preventing any up-firing jets from being commanded for rotational control. The LOW 2 
РВІѕ are illuminated (forward and aft) and ће Z HIGH PBI is extinguished, making them 
mutually exclusive. The LOW Z can be toggled to allow selection of LOW Z/NORM or 
LOW Z/PULSE modes. 


Depressing NORM for an axis causes the appropriate primary thrusters in that axis to 
be fired for as long as the THC is held out of detent. The NORM PBls (forward and aft) 
are illuminated and the PULSE апа Z HIGH PBls are extinguished for the applicable 
axis. 


Depressing PULSE for an axis causes the appropriate primary thrusters in that axis to 
be fired for a preset increment (feet per second) in response to each deflection of the 
THC. No further firing occurs until the THC is returned to detent and deflected again. 
The PULSE РВ: (forward and aft) are illuminated and the NORM or Z HIGH РВІѕ are 
extinguished for the applicable axis. 


To ensure PBI prioritizing, simultaneous, conflicting commands will be treated as 
follows: for the X, Y axes, NORM has priority over PULSE. For the Z-axis, HIGH has 
priority over LOW, and NORM has priority over PULSE, which has priority over HIGH. 
For rotation, DISC RATE has priority over PULSE. 


The DAP is initialized in OPS 2, with DAP load A for SELECT, AUTO control, PRI jets, 
DISC RATE rotational submode, and PULSE translation submode. 
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6.13 QUESTIONS 


1: 
2. 


When there are conflicting body Пар slew commands, which command has priority? 


To change the body flap mode from automatic to manual, or from manual to 
automatic, which body flap AUTO/MAN PBI must be depressed? 


During entry, how can a crewmember deactivate yaw jets and cause the ailerons 
and/or rudder to be used to control sideslip? 


What must be done in order for the abort mode switch to initiate an RTLS, AOA, or 
ATO after being placed in the desired position? 


In a given axis, which crew position, commander or pilot, has trim priority? 


For the trim switches to be used by the software, the associated trim enable/inhibit 
switches must be in which position? 


Which position of the FCS channel switches is hardwired to the GPCs? 


If both or neither position (-X or -Z) is indicated for the aft sense switch, what is the 
assumed switch position? 


What is the function of the DAP LVLH PBI? 


. ls a manual mode rotation roll DISC, pitch DISC, yaw PULSE PBI configuration 


allowed? 
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7.0 BACKUP FLIGHT SYSTEM CONTROLLERS 


This section discusses the controller differences when in the BFS. 


7.1 RHC (COMMANDER AND PILOT) 


There is no manual control during powered flight ascent. Detent processing (hot stick) 
is only for trans-DAP (no on-orbit DAP and no AUTO during entry-only CSS). RM 
processing includes only midvalue-select SF. There is no Fault Detection, Identification, 
and Reconfiguration (FDIR) or downmoding for comm faults. There is no DG test. 


7.2 FORWARD THC AND SWITCH PROCESSING 


The forward THC operates with three contacts for each direction (+x, Xy, +z). The 
output from the THC is a discrete signal. Therefore, it is processed like a switch in 
selection filter. Selection filtering for the forward THC and switches will be performed as 
follows. For the forward THC and three contact switches, output is the majority vote. 
For two contact switches, output is the logical AND of both inputs. For one contact 
switches, output is the same as the input. There is no FDIR, comm fault recognition, or 
crew deselection capability in the BFS software, therefore, selection filter can not 
downmode. Commander and pilot requests will be based on the last selected. 


7.3 RPTA (COMMANDER) 


The BFS processes left crew station RPTA signals only; however, because the rudder 

pedals on both sides are mechanically linked, either the соттапдег 55 or pilots rudder 

pedals will be processed. RM processing includes only a midvalue select SF. There is 
no FDIR or downmoding for comm faults during BFS or any DG test. 


7.4 SBTC 


Manual throttling during ascent is not possible if the BFS is engaged. The speedbrake 
is also controlled automatically during entry to an altitude of 2000 ft. Below 2000 ft., the 
speedbrake must be moved manually. RM processing includes only a midvalue select 
SF. There is no FDIR or downmoding for comm faults or any DG test. 
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8.0 REDUNDANCY MANAGEMENT 


8.1 OVERVIEW 


Controller RM receives triply redundant signals from each controller and provides the 
controller software operating program with the RM-selected signal. As an example, RM 
receives the following individual controller signals: 


е Left, right, and aft RHC pitch command channels 1, 2, апа З 

e Left, right, and aft RHC roll command channels 1, 2, and 3 

e Left, right, and aft RHC yaw command channels 1, 2, and 3 

е Left and right SBTC speedbrake or thrust control command channels 1, 2, and 3 


е Left and right RPTA rudder movement command channels 1, 2, and 3 


Each channel 1 command, whether RHC pitch, roll, and yaw channel 1 or SBTC and 
RPTA control command, comes from a channel 1 transducer within the specific 
controller. SF and FDIR processes are done on these transducers. The FDIR detects 
data which is out of tolerance, identifies the faulty unit, and may make the data from the 
faulty unit unavailable to the SF. For the КНС, processes are done on the three 
transducers for each RHC axis (as an example, the pitch channel 1, roll channel 1, and 
yaw channel 1 transducers of the Іей RHC). The SBTC and ВРТА do not have multiple 
axes; therefore, the channel 1 transducer has only one channel 1 command for RM to 
use. 


Controllers are downmoded on a transducer or channel basis or like numbered 
channels in the multiple RHC axis case. Dilemmas are not resolved because there is 
no Built-In Test Equipment (BITE). There is a DG flag. 


8.1.1 Three Good Signals (Nominal Case) 


The middle-value signal is selected by the SF for output to the SOP. For the three-level 
RM, the DG indicator is always set good. The FDIR subtracts pairs of signals and 
compares the results to an I-load limit. A signal is declared failed by the FDIR if it differs 
from the other two signals by more than the I-load limit and the failure counter has 
reached its limit of three. 


8.1.2 First Failure (Two Good Signals) 


When a signal is declared failed by the FDIR, it is deselected from the SF and the FDIR. 
Fault annunciation occurs for failed RHC and SBTC signals. (For an RHC, a failure in 
one axis causes the comparable channel signals in the other axis of that RHC to be 
deselected from the SF and FDIR). RM is downmoded to level 2 and the two signals 
are averaged and output to the SOP. The DG test is implemented by subtracting the 
two signals and comparing the results with an l-load limit. The DG flag is set “good” if 
the DG limit is not exceeded. The FDIR continues to subtract the two signals and 
compare the results to an I-load limit. 
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8.1.3 Second Failure (One Good Signal) 


À second failure caused by a bad signal will not cause RM to downmode, but will result 
in the SF averaging the remaining good signal with the bad signal for output to the SOP. 
However, if the DG limit is exceeded, a dilemma will result and the DG flag will be set 
bad. These DG limits are presently 4.51" in pitch and roll and 2.7° in yaw for the RHCs. 
All signals from that controller will be set to zero by the SOP. Fault annunciation occurs 
for RHC and SBTC dilemma conditions, but not for RPTA. The FDIR must count three 
consecutive miscomparisons before the crew annunciation is implemented. Therefore, 
the DG flag will go bad before annunciation occurs, since one miscompare triggers the 
DG bad indication. The DG flag is not latched, so it is possible for it to reset to “good.” 


8.1.4 Third Failure (No Good Signals) 


The SF DG flag is set bad and there is no FDIR processing. SOP sends zeros to the 
FCS. 


8.1.5 First Failure (Comm Fault) 


Communication faults also cause failures. The FDIR and SF are downmoded in this 
case by the FCOS. The indication of a comm fault on a display is an "M" (missing data). 
A comm fault occurs when input data from GNC hardware going to each of the GPCs 
are found by the FCOS to contain errors, not to have arrived in the prescribed amount 
of time, or not to have arrived at all. A comm fault flag is set to advise GNC software 
that a fault has occurred and that the expected data are missing. 


The first failure by a comm fault causes an "M" to appear on the GNC SYS SUMM 1 
display for the channel on which there are no data. Crew annunciation (in the form of 
"M" for comm fault or missing data, "|" for an upper or lower limit being met or exceeded 
or a system failure, and “?” for a dilemma) is the same for all programs. Caution and 
Warning (C&W) annunciations are covered in the Caution and Warning 21002 manual. 


Channel commands declared missing by FCOS, SF, and FDIR are downmoded to 

level 2. SF outputs the average of the two remaining signals. A DG test is implemented 
for each channel as in the second failure case. If a result exceeds the limit three 
consecutive times, FDIR declares a dilemma. If the comm fault no longer exists, FDIR 
and SF upmode to level 3 and FDIR resumes fail count. The failure counter is not 
affected by comm faults. 


8.1.6 Second Failure (Comm Fault) 


A second failure caused by a comm fault will result in the downmoding of the SF and 
the FDIR to level 1. The remaining signal (good or bad) is passed through RM with no 
processing. The DG flag is set good for the level 1 RM. If the comm fault clears, RM 
will upmode to level 2. 


8-2 


USA006498 
Rev A 


8.1.7 Third Failure (Comm Fault) 


A third failure by a comm fault downmodes the SF and FDIR to level 0. The DG flag is 
set bad. The SOP sends zeros to the FCS for the controller output. If the comm fault 
clears, RM upmodes to level 1. 


A third failure caused by the remaining signals failing when the second failure was a 
comm fault will not affect RM. The bad signal is passed through RM with no 
processing. The DG flag is set good, but bad data will be passed to flight control. 


Figure 8-1 is a diagram showing RM downmoding. 
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8.2 RHC RM 


RHC RM is performed on both the left and right RHCs during OPS1, OPS 2, OPS З, 
and OPS 6. The aft RHC is added to RM processing during OPS 2. All signals from the 
RHCs are triply redundant. 


During MM 102 - MM106 and MM 601, all three axis are processed through RM which 
consists of selection filter only. There is no RHC РОВ. FDIR is performed by the flight 
controllers in the Mission Control Center at these times. The same is true during MM 
602 and MM 603, but only the pitch and roll axes are processed. Selection filtering is 
downmoded only by comm faults. A failure resulting from disagreeing data will go 
undetected by RM. 


During MM 201 and MM 202, the three axis RM processing includes FDIR and selection 
filter for all three RHCs. Once the transition to OPS 3 occurs, the aft RHC is no longer 
processed. Three axis RM processing continues from MM 301 - MM 303. During MM 
304 - MM 305, two axis RM processing is performed for the roll and pitch signals from 
the left and right RHCs. 


8.3 SBTC RM 


SBTC RM is performed simultaneously but separately on both left and right SBTCs. In 

MM 304, 305, 602, and 603, RM is performed for speedbrake control; in MM 102, 103, 

and 601, RM is performed for throttle control. RM for SBTC commands is the same as 
for RHC commands. SBTC FDIR is available in OPS 3 only, and the SF is downmoded 
only by comm faults in OPS 1 or OPS 6. The SBTC signals are triply redundant. 


The SBTC takeover switch is triply redundant and is used to gain or transfer manual 
speedbrake control, or to gain manual throttling control for the right SBTC only. Since 
the SBTC takeover switch is a three-contact, two-position switch, it has the same RM 
cases as the aft sense switch. There is no RM annunciation for the takeover switch. 


The speedbrake/throttle (SPD BK/THROT) РВ! is triply redundant and, when 
depressed, provides an indication to place the speedbrake or throttling function under 
software control. An illuminated AUTO light indicates that speedbrake control or engine 
throttling is under software control. An illuminated MAN light (left or right, but not both) 
indicates that speedbrake or engine throttling is under manual control of the 
corresponding crewmember. Like the SBTC takeover switch, the SPD BK/THROT PBI 
has the same RM cases as the aft sense switch. 


8.4 RPTA RM 


RPTA RM is performed simultaneously but separately on both the left and the right side 
RPTAs. RM for RPTA commands is also the same as for RHC commands. 
Downmoding of SF is by comm faults in OPS 6. There is no FDIR during OPS 6. There 
is no FDIR annunciation for RPTA failures. The RPTA signals are triply redundant. 
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8.5 THC RM 


THC RM is performed on the six positions of the forward and aft THCs during OPS 2 
and OPS 8 and on the forward THC during OPS 1 and OPS 3. Each position (*X, -X, 
*Y, -Y, +2, -Z) has three contacts and is analogous to a three-contact switch. THC RM 
is performed on the switch contacts, which is a discrete RM scheme. THC failures are 
annunciated for the crew. 


8.6 GNC SWITCH RM 


Switch RM monitors switch contacts and determine the outputs for certain switch 
positions. These are discrete RM systems. 


The SF for discrete data differs from the RHC, RPTA, and SBTC analog data selection 
system. The method of selection is different. There is no DG flag since there are no 
tracking tests, and downmoding is on a switch-position (not the entire switch) basis. 


However, certain features of the discrete data selection are similar to the concepts 
discussed for the controllers' data selection. These features include downmoding for 
comm fault, failure, or crew deselection; upmoding for software reinitialization of comm 
fault flags or selection from acceptable candidates. 


When considering an individual switch, a selection is made from candidate contacts for 
each position of the switch. To be a candidate, a switch contact must 


е Not have a comm fault flag set 
e Not be declared failed by FDIR 
е Not be deselected manually by the crew 


The discrete output for a closed switch is 1, and for an open switch is O. In this 
discussion, consider a 1 and 0 for contacts closed and open. 


8.6.1 Three Contacts Available 


The SF output is the majority vote of the three contacts; that is, two of the three contacts 
must be closed (made) for the switch to be in the monitored position. A 1 is output; 
otherwise, 0 is output. The FDIR compares all three contacts and declares a contact 
failed if it differs from the other two contacts for three consecutive FDIR cycles. A failed 
contact is deselected from the SF and the FDIR, and thus downmodes RM to the two- 
contact level. There is no annunciation of the failure to the crew. Downmoding is on a 
switch-position contact basis. 
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8.6.2 Two Contacts Available 


Both contacts must be closed (made) for the SF output to indicate that the switch is in 
the monitored position. The selected value is the logical AND of the two contacts. In 
order for a 1 to be output, both contacts must be 1. The FDIR compares the two 
contacts and declares a dilemma if they miscompare (one closed and one open) for 
three consecutive FDIR cycles. Generally, there is no annunciation to the crew of this 
situation. FDIR cannot resolve the dilemma. 


8.6.3 One Contact Available 


The SF output is the same as the single contact input for the monitored position. The 
value of the only contact 1 or 0 is output. There is no FDIR processing at the 1 contact 
level. 


Comm faults downmode the SF and FDIR for as long as the comm fault is present. If 
the comm fault goes away, the SF and FDIR upmode to the next higher level. 


The matrix in Figure 8-2 shows the channelization summary for the control switches. 
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2. i Switch/PBI Panel Electrical 
name NO/LOCH control bus 


Abort mode switch AB 1, BC1, CA1 

Body flap switch 

Body flap switch 

Body flap mode switch AB1, BC1, CA1 

Body flap mode switch BC2, CA2, BC3 

Entry mode switch AB1, BC1, CA1, BC2 
BC1, AB1, CA1 
BC2M, CA3M, BC3 
CA1, AB2, BC1 


AB1, BC1, CA1 
FCS mode, roll/yaw AB1, BC1, CA1 
FCS mode, pitch 
FCS mode, roll/yaw 


AB1, BC1, САТ 
BC2, CA2, BC3 
MN A&B, A&B, A&B 


SBTC right takeover SW 
Sense switch 


Figure 8-2. Channelization summary for the control switches 
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QUESTIONS 


For the nominal case, RM selects which signals from the triply redundant КНС 
signals to output to the RHC SOP? 


For an RHC signal to be declared failed by RM, it must differ from which other two 
signals by more than a predefined tolerance for three consecutive counts? 


At the 2-level, the values of the remaining two RHC signals are 


If the DG limit is exceeded by a single channel in an RHC axis, outputs from all 
axes on that channel of the RHC are sent to the FCS as : 


What action is recommended if a dilemma condition exists Тог ап КНС in dynamic 
flight (for example, entry)? 


Triply redundant signals from the RHCs first undergo redundancy management 
software processing, which is made up of which two processors? 


The THC has six positions, and each position can be compared to a three-contact 
switch. Therefore, THC RM is identical to that of which switch? 
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APPENDIX A 
ACRONYMS AND ABBREVIATIONS 


Altitude Display Indicator 
Ascent/Entry Primary Flight Display 
Abort Once Around 

Aerosurface Amplifier 
Abort-To-Orbit 

Ascent Thrust Vector Control 

Auto 


Body Flap 

Backup Flight Control 
Backup Flight System 
Built-In Test Equipment 


Caution and Warning 
Checkout 
Command 
Control Stick Steering 


Digital Autopilot 
Device Driver Unit 
Dedicated 
Deselect 

Data Good 
Discrete 


Flight Control Operating System 

Flight Control System 

Fault Detection, Identification, and Reconfiguration 
Flight Forward 

Functional Subsystem Software Requirements 


Guidance, Navigation, and Control 
General Purpose Computer 


Johnson Space Center 

Local Vertical/Local Horizontal 
Manual 
Multiplexer/Demultiplexer 


Major Mode 
Mission Operations Directorate 
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National Aeronautics and Space Administration 


Orbital Maneuvering System 
Operational Sequence 


Pitch 

Primary Avionics Software System 
Pushbutton Indicator 

Panel 


Roll/Yaw 

Reaction Control System 

Rotational Hand Controller 
Redundancy Management 

Rudder Pedal Transducer Assembly 
Return-To-Launch Site (abort) 


Speedbrake and Thrust Controller 
Selection Filter 

Systems Management 
Subsystem Operating Program 
Space Shuttle Main Engine 
Switch 


Transoceanic Abort Landing 
Translational Hand Controller 
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APPENDIX B 
ANSWERS 


SECTION 1.0 


1. 


The speedbrake/thrust controller is the controller that is used to manually control 
main engine thrust during ascent. 


2. The Translational Hand Controller controls the orbiter translation along the vertical, 
lateral, and longitudinal axes. 

3. A loss of main bus A would have no effect on the pilots DDU, because it is powered 
by main buses B and C. 

4. The loss of MDM FF 2 would cause the loss of all channel 1 signals to the pilot's 
controllers. 

SECTION 2.0 

1. The RHC hardstop is the maximum deflection possible in an RHC axis. 

2. The purpose of the aft sense switch with regard to the RHC is to establish a control 
reference based on the crewmembers’ line of sight. 

3. During an RTLS abort, three-axis RHC capability is possible only for MM 601. 

4. To achieve CSS during ascent, either the pitch or roll/yaw CSS PBI must be 
depressed. Hot sitck down mode is not available during ascent. 

SECTION 3.0 

1. The aft sense switch is important for aft THC use because it must be in the proper 
position for the aft THC commands to be correctly transformed to give the desired 
orbiter movement. 

2. Ifthe commander and aft crew generate conflicting THC commands, the resultant 
translation output command will be zero. 

3. Acrewmember can confirm a THC failure after failure annunciation by the down 


arrow that can be seen on the RM ORBIT, GNC SYS SUMM 1, and 
CONTROLLERS displays. 
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SECTION 4.0 


ae 


Manual control of the main engine throttling is gained by using the Pilots SBTC 
takeover switch and matching auto throttling within 4 percent. 


2. Manual control of the speedbrake is gained by momentarily depressing the SBTC 
takeover switch. 

3. During entry, an SBTC lever placed at the forward stop commands the speedbrake 
to closed. 

4. Тһе crew can deselect a bad SBTC channel by using the CONTROLLERS display 
during OPS 8. 

SECTION 5.0 

1. The RPTA generates an electrical signal output for each set of rudder pedals. 

2. The set of rudder pedals that has priority is the compensated signal with the largest 
magnitude, because the commander and pilot's RPTAs are mechanically linked 
together. 

3. The right or left RPTA signal is output to flight control, provided that the data good 
flag is true and its magnitude is the larger of the two, the flight controller power is 
on, roll/yaw is in CSS, and Mach < 5. 

SECTION 6.0 

1. When there are conflicting body flap slew commands, the UP command has priority. 

2. To change the body flap mode from automatic to manual or from manual to 
automatic, either body flap AUTO/MAN PBls must be depressed. 

3. During entry, a crewmember can deactivate yaw jets and cause the ailerons and/or 
rudder to be used to control sideslip by using the NO YAW JET position of the Entry 
Mode switch. 

4. In order for the abort mode switch to initiate an RTLS, AOA, ог ATO after being 
placed in the desired position, the abort PBI must be depressed. 

5. In a given axis, neither the commander nor the pilot has trim priority, because 
conflicting trim commands in an axis result in zero trim commands. 

6. Forthe trim switches to be used by the software, the associated trim enable/inhibit 
switches must be in the enable position. 

7T. Only the OVERRIDE position of the FCS channel switches is hardwired to the 


GPCs. 
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8. If both or neither position (-X or -2) is indicated for the aft sense switch, -Z is the 
assumed default position. 

9. The function of the DAP LVLH PBI is to mode the on-orbit DAP to manual LVLH 
mode. With rotation in DISC rate for all three axes and КНС in detent, LVLH hold 
will be maintained. 

10. Amanual mode rotation roll DISC, pitch DISC, yaw PULSE PBI configuration is 
allowed; mixed modes are permitted on an axis-by-axis basis. 

SECTION 8.0 

1. Forthe nominal case, RM selects the middle-value signals from the triply redundant 
RHC signals to output to the RHC SOP. 

2. Foran RHC signal to be declared failed by RM, it must differ from the other two 
signals in the same axis by more than a predefined tolerance for three consecutive 
counts. 

3. Atlevel-2, the values of the remaining two RHC signals are averaged. 

4. Ifthe DG limit is exceeded in an RHC axis, outputs from all axes of the RHC are 
sent to the FCS as zeros. 

5. The crewmembers should turn the flight controller power switch OFF for the specific 
controller if a dilemma condition exists for an RHC in dynamic flight (for example, 
entry). 

6. Triply redundant signals from the RHCs first undergo redundancy management 
software processing, which is made up of an SF and an FDIR processor. 

T. The THC has six positions, and each position can be compared to a three-contact 


switch. Therefore, THC RM is identical to any three contact switch. 
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TRAINING MATERIALS EVALUATION 


Please answer the following questions regarding the lesson you just completed. Your 
feedback will allow us to produce more effective training materials. When completed, mail 
to: Manager, DT 34. 


TITLE/CODE OF LESSON: Controllers Workbook/CONT 21002 
SIZE OF AUDIENCE/CLASS: 


1. How well did this lesson meet its purpose? 


For each statement below, mark one box on the scale: Strongly Strongly 
Disagree Agree 
a. The lesson objectives are clearly stated. ПП ПП 0 о 
b. Тһе lesson objectives are clearly defined. ПП © ПП о 
с. Thelesson effectively teaches skills and information. п о 
d. The lesson meets its purpose and objectives. п о 
2. How satisfying is the content of this lesson? 
For each statement below, mark one box on the scale: Strongly Strongly 
Disagree Agree 
a. The information is structured in a logical flow. 00000 о 
b. The content is clear. и и и и и о 
c. Тһе content is complete. ПП ПП 0 O 
d. Тһе level of detail is correct for this information. и и и и и о 
e. The amount of information is effective. и и и и 0 о 
f. The graphics contribute to my understanding. t] D LH п 
3. How appealing was the presentation of this 
lesson? Strongly Strongly 
For each statement below, mark one box on the scale: Disagree Agree 
a. The overall presentation is appealing. и и и и 0 о 
b. The visuals chosen аге appropriate for ће lesson. О © п 0 oO о 
c. Тһе visuals make the information more interesting. ПП и и 0 
d. The graphics аге legibly reproduced. о D LH п D о 
e. The audio/visual or print quality is good. о D LH O 
4. How valuable is this information? 
For each statement below, mark one box on the scale: Strongly Strongly 
Disagree Agree 
a. The lesson teaches skills and information | need. и D и и и о 
b. Тһе lesson meets my expectations. и и и и 0 о 
c. This information is useful for later reference. ПП о 
d. | would recommend this lesson to others. ПП ПП о 


PLEASE WRITE YOUR COMMENTS/QUESTIONS ON THE BACK OF THIS FORM. 
EXPLAIN ANY NEGATIVE ANSWERS IN SPECIFIC TERMS. 


THANK YOU IN ADVANCE FOR YOUR ASSISTANCE! 
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